Network Requirements

Network requirements are one piece of information you need to know when preparing to implement CXone. A list of additional requirements for implementation are available on the Implementation page in the online help.

TLS Cipher Requirements

For clarity in discussing ports, outbound is defined as from your initiation point to NICE CXone. Inbound is defined as the NICE CXone initiation point to your servers.

The following are TLS cipher requirements for all CXone systems:

NICE CXone takes the security of the connections between your organization's network and our network very seriously. To ensure that you have a secure, encrypted connection, NICE CXone requires at least TLS 1.2 compliance and the following ciphers as noted.

Inbound Traffic (from CXone to your servers)

You must support at least one of the following ciphers on servers that CXone communicates with such as IVR scripts or other integrations. It is recommended that you support multiples of these ciphers if possible. If you are trying to integrate with other service providers, you are responsible for ensuring that those providers also meet these requirements.

  • 0x009E, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
  • 0xC013, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
  • 0xC02B, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  • 0xC02C, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

Outbound Traffic (from your servers to CXone)

You must support at least one of these ciphers from any source that communicates with CXone such as browsers and back-end integrations. It is recommended that you support both of these ciphers if possible.

  • 0xC02F, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  • 0xC030, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

For more information on encryption, view our encryption guidelines.

Proxy Traffic Inspection Policies for All CXone Systems

CXone does not support the use of traffic inspection proxy services for several reasons:

  • Routing your WAN traffic through a proxy introduces packet latency. CXone solutions are real-time. Delays in packet delivery impair both agent and customer experience.
  • Proxy service providers conduct regular maintenance. This can impact your system and even make it unavailable.
  • Inadvertent changes to routing policies can create disruptions in service.
  • When problems occur, assistance from the third-party proxy provider is necessary to ensure thorough troubleshooting. This helps avoid delays in resolution and extended disruptions to service.